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Errata Overview _ 

The definition of PRP Entry 2 is clarified throughout the specification. 

The Get Log Page and Security Send & Receive commands were modified to allow a pointer to a 
PRP List to accommodate a larger data transfer. 

The specification is made consistent that the MLBAR (BARO) may be 32-bit address space to be 
consistent that only 32-bit addresses may be assigned behind a bridge. 

Clarifications are included for when it is safe to power off the controller related to shutdown 
operations. 

Write Uncorrectable is added as a command that may cause the “Attempted Write to Read Only 
Range” error. 

Various editorial updates are also made. 
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Revision History 


Revision Date 

Change Description 

5/15/2014 

First draft. Captured PRP2 changes and allowing Get Log Page and 

Security Send & Receive to point to a PRP List for PRP2. 

6/4/2014 

Added Write Uncorrectable as a command that may cause the error 
“Attempted Write to Read Only Range”. 

7/22/2014 

Added atomic clarifications, async event clarifications, and KB clarification. 

8/12/2014 

Added clarification on write zeroes 

8/15/2014 

Edited AER clarifications, added autonomous transitions, SGL, editorial 
changes, minimum queue size, and identify clarifications 

8/19/2014 

Added clarifications and updates based on review of pages 140 to 172 of 
the specification, clarified Controller Level Reset, various other updates. 

8/21/2014 

Rejected change to Figure 46. 


Description of Specification Changes 


Modify the PRP Entry 2 field of Figure 11 as shown below: 


Figure 11: Command Format - Admin Command Set 


Bytes 

Description 

43:40 

Command Dword 10 (CDW10): This field is command specific Dword 10. 

39:32 



PRP Entry 2 (PRP2): This field: 

a) is reserved if the data transfer does not cross a memory page boundary. 

b) specifies the Page Base Address of the second memory page if the data transfer crosses 
exactly one memory page boundary. E.g.,: 

i. the command data transfer length is equal in size to one memory page and the 
offset portion of the PBAO field of PRP1 is non-zero or 

ii. the Offset portion of the PBAO field of PRP1 is equal to zero and the command 
data transfer length is greater than one memory page and less than or equal to two 
memory pages in size. 

c) is a PRP List pointer if the data transfer crosses more than one memory page boundary. 

E.g.,: 

i. the command data transfer length is greater than or equal to two memory pages in 
size but the offset portion of the PBAO field of PRP1 is non-zero or 

ii. the command data transfer length is equal in size to more than two memory pages 
and the Offset portion of the PBAO field of PRP1 is equal to zero. 

31:24 

PRP Entry 1 (PRP1): This field contains the first PRP entry for the command or a PRP List pointer 
depending on the command. 
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Modify the PRP Entry 2 field of Figure 12 as shown below: 


Figure 12: Command Format - NVM Command Set 


Bytes 


Description _ 

Data Pointer (DPTR): This field specifies the data used in the command. 


If CDW0[15] is cleared to ‘O’, then the definition of this field is: 


39:32 



List pointer. 

PRP Entry 2 (PRP2): This field: 

a) is reserved if the data transfer does not cross a memory page boundary. 

b) specifies the Page Base Address of the second memory page if the data 
transfer crosses exactly one memory page boundary. E.g.,: 

iii. the command data transfer length is equal in size to one memory 
page and the offset portion of the PBAO field of PRP1 is non-zero or 

iv. the Offset portion of the PBAO field of PRP1 is equal to zero and 
the command data transfer length is greater than one memory page 
and less than or equal to two memory pages in size. 

c) is a PRP List pointer if the data transfer crosses more than one memory page 
boundary. E.g.,: 

i. the command data transfer length is greater than or equal to two 
memory pages in size but the offset portion of the PBAO field of 

PRP1 is non-zero or 

ii. the command data transfer length is equal in size to more than two 
memory pages and the Offset portion of the PBAO field of PRP1 is 
equal to zero. 

31:24 

PRP Entry 1 (PRP1): This field contains the first PRP entry for the command or a 
PRP List pointer depending on the command. 


lfCDW0[15] is set to T, then the definition of this field is: 


SGL Entry 1 (SGL1): This field contains the first SGL segment for the command. 
If the SGL segment is a Data Block descriptor, then it describes the entire data 
transfer. If more than one SGL segment is needed to describe the data transfer, 
then the first SGL segment is a Segment, or Last Segment descriptor. Refer to 
section Error! Reference source not found, for the definition of SGL segments 
and descriptor types. 


Modify Figure 62 as shown below: 


Figure 62: Firmware Image Download - PRP Entry 2 


Bit 

Description 

63:00 

PRP Entry 2 (PRP2): This field contains the second PRP entry. Refer to Figure 11 for the definition 



field contains a pointer to a PRP List. 
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Modify Figure 67 as shown below: 



Figure 67: Get Features - PRP Entry 2 

Bit 

Description 

63:00 

PRP Entry 2 (PRP2): This field contains the second PRP entry. Refer to Figure 11 for the definition 
of this field. If PRP Entry 1 specifies enough space for the data structure, then this field is reserved. 
Otherwise, it specifies the remainder of the data buffer. This field shall not be a pointer to a PRP 


as part of the specified feature, then this field is ignored. 


Modify Figure 71 as shown below: 



Figure 71: Get Log Page - PRP Entry 2 

Bit 

Description 

63:00 

PRP Entry 2 (PRP2): This field contains the second PRP entry. Refer to Figure 11 for the definition 
of this field. If PRP Entry 1 specifies enough space for the data structure, then this field is reserved. 
Otherwise, it specifies the remainder of the data buffer. This field shall not be a pointer to a PRP 


PRP entry. 


Modify Figure 81 as shown below: 



Figure 81: Identify - PRP Entry 2 

Bit 

Description 

63:00 

PRP Entry 2 (PRP2): This field contains the second PRP entry. Refer to Figure 11 for the definition 
of this field. If PRP Entry 1 specifies enough space for the data structure, then this field is reserved. 
Otherwise, it specifies the remainder of the data buffer. This field shall not be a pointer to a PRP 
List as the data buffer may not cross more than one page boundary. 


Modify Figure 88 as shown below: 



Figure 881: Set Features - PRP Entry 2 

Bit 

Description 

63:00 

PRP Entry 2 (PRP2): This field contains the second PRP entry. Refer to Figure 11 for the definition 
of this field. If PRP Entry 1 specifies enough space for the data structure, then this field is reserved. 
Otherwise, it specifies the remainder of the data buffer. This field shall not be a pointer to a PRP 
List as the data buffer may not cross more than one page boundary. If no data structure is used 
as part of the specified feature, then this field is not used. 
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Modify Figure 115 as shown below: 


Figure 115: Security Receive - PRP Entry 2 


Bit 

Description 

63:00 

PRP Entry 2 (PRP2): This field contains the second PRP entry. Refer to Figure 11 for the definition 





Modify Figure 119 as shown below: 


Figure 119: Security Send - PRP Entry 2 


Bit 

Description 

63:00 

PRP Entry 2 (PRP2): This field contains the second PRP entry. Refer to Figure 11 for the definition 





Modify the last paragraph of section 4.3 as shown below: 

PRP Lists shall be minimally sized with packed entries starting with entry 0. If more PRP List pages are 
required, then the last entry of the PRP List pag e i s a po i nt e r to th e contains the Page Base Address of the 
next PRP List page. The total number of PRP entries required by a command is implied by the command 
parameters and memory page size. 


Modify Figure 15 as shown below: 


Figure 15: PRP Entry - Page Base Address and Offset 


Bit 

Description 

63:02 

Page Base Address and Offset (PBAO): This field indicates the 64-bit physical memory page 
address. The lower bits (n:2) of this field indicate the offset within the memory page. If the memory 
page size is 4KB, then bits 11:02 form the Offset; if the memory page size is 8KB, then bits 12:02 
form the Offset, etc. If this entry is not the first PRP entry in the command or in the PRP List a 
PRP list pointer in a command then the Offset portion of this field shall be cleared to Oh. 

01:00 

Reserved 


Modify section 2.1.10 as shown below: 

2.1.10 Offset lOh: MLBAR (BARO) - Memory Register Base Address, lower 32-bits 


This register allocates space for the memory registers defined in section 3. 


Bit 

Type 

Reset 

Description 

31:14 

RW 

0 

Base Address (BA): Base address of register memory space. For controllers that 
support a larger number of doorbell registers or have vendor specific space following the 
doorbell registers, more bits are allowed to be RO such that more memory space is 
consumed. 

13:04 

RO 

0 

Reserved 

03 

RO 

0 

Prefetchable (PF): Indicates that this range is not pre-fetchable 

02:01 

RO 

TO 

Impl 

Spec 



recommended to support mapping anywhere in 64-bit address space. 


Technical input submitted to the NVM Express™ Workgroup is subject to the terms of the NVM Express™ 
Participant’s agreement. Copyright © 2014 NVMe™ Corporation. 






























00 

RO 

0 

Resource Type Indicator (RTE): Indicates a request for register memory space. 


Modify the first paragraph of section 6.14 as shown below: 

The Write Uncorrectable command is used to mark a l og i ca l b l ock range of logical blocks as invalid. When 
the specified logical block(s) are read after this operation, a failure is returned with Unrecovered Read Error 
status. To clear the invalid logical block status, a write operation is performed on those logical blocks. 


Modify Figure 43 as shown below: 

Figure 43: Asynchronous Event Request - Completion Queue Entry Dword 0 


Bit 


Description 


31:24 


Reserved 


23:16 


Assoc i at e d Log Page Identifier: Indicates the log page associated with the asynchronous event. 
This log page needs to be read by the host to clear the event. 


15:08 


Asynchronous Event Information: Refer to Figure 44, and Figure 45, and Figure 46 for detailed 
information regarding the asynchronous event. 


07:03 


Reserved 


02:00 


Asynchronous Event Type: Indicates the type of the asynchronous event, 
information on the event is provided in the Asynchronous Event Information field. 


More specific 


Value 

Definition 

Oh 

Error status 

1 h 

SMART / Health status 

.£= 

LO 

1 

_C 

CM 

Reserved 

6h 

I/O Command Set specific status 

7h 

Vendor specific 


Modify the last three paragraphs of section 7.6.2 on Shutdown as shown below: 

It is recommended that the host wait a minimum of one second for the shutdown operations to complete. It is 
not recommended to disable the controller via the CC.EN field. This causes a controller reset condition which 
may impact the time required to complete shutdown processing. 

It is safe to power off the controller when CSTS.SHST indicates shutdown processing is complete (regardless 
of the value of CC.EN). It remains safe to power off the controller until CC.EN transitions from ‘0’ to T. 

To start executing commands on the controller after a shutdown operation, a reset (CC.EN cleared from T to 
‘0’) is required. The initialization sequence should then be executed. 

It is an implementation choice whether the host aborts all outstanding commands to the Admin Queue prior to 
the shutdown. The only commands that should be outstanding to the Admin Queue at shutdown are 
Asynchronous Event Request commands. 
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Modify Figure 33 as shown below: 


Figure 33: Status Code - Command Specific Status Values, NVM Command Set 


Value 

Description 

Commands Affected 

80h 

Conflicting Attributes 

Dataset Management, Read, Write 

81 h 

Invalid Protection Information 

Compare, Read, Write, Write Zeroes 

82h 

Attempted Write to Read Only Range 

Dataset Management, Write, Write 
Uncorrectable, Write Zeroes 

83h - BFh 

Reserved 



Modify section 6.7.2 as shown below: 

6.7.2 Command Completion 

When the command is completed, the controller shall post a completion queue entry to the associated I/O 
Completion Queue indicating the status for the command. 

Dataset Management command specific status values are defined in Figure 140. 


Figure 140: Dataset Management - Command Specific Status Values 


Value 

Description 

80h 

Conflicting Attributes: The attributes specified in the command are conflicting. 

82h 

Attempted Write to Read Only Range: The controller may optionally report this status 
if a Deallocate is attempted for a read only range. 


Modify a portion of Figure 83 as shown below: 


533:532 


O 


Atomic Compare & Write Unit (ACWU): This field indicates the atomic write size for 
the controller for a Compare and Write fused command. This field shall be supported 
if the Compare and Write fused command is supported. This field is specified in logical 
blocks and is a 0’s based value. If a Compare and Write is submitted that requests a 
transfer size larger than this value, then the controller shall may fail the command with 
a status code of Invalid Field in Command. If Compare and Write is not a supported 
fused command, then this field shall be Oh. 


Modify a portion of section 6.4.2.1 as shown below: 


6.4.2.1 AWUPF Example (Informative) 

In this example, AWUPF has a value of 1K (equivalent to two 512 byte logical blocks), AWUN has a value of 
444 2K (equivalent to four 512 byte logical blocks). Command A writes LBAs 0-1. Figure 125 shows the initial 
state of the NVM. 
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Modify a portion of section 2.1.3 as shown below: 
Offset 06h: STS - Device Status 


Bit 

Type 

Reset 

Description 

15 

RWC 

0 

Detected Parity Error (DPE): Set to T by hardware when the controller 
detects a parity error on its interface. 

14 

RWC/RO 

0 

Signaled System Error (SSE): Not supported by NVM Express. Refer 
to the PCI SIG specifications. 


Modify the last two paragraphs of section 5.2 as shown below: 

Asynchronous events are reported due to a new entry being added to a log page (e.g., Error Information log) 
or a status update (e.g., status in the SMART / Health log). A status change may be permanent (e.g., the 
media has become read only) or transient (e.g., the temperature exceeded a threshold for a period of time). 
Host software should modify the event threshold or mask the event for transient and permanent status 
changes before issuing another Asynchronous Event Request command to avoid repeated reporting of 
asynchronous events. 

If the controller needs to report an event and there are no outstanding Asynchronous Event Request 
commands, the controller should send a single notification of that Asynchronous Event Type when an 
Asynchronous Event Request command is received. If a Get Log Page command clears the event prior to 
receiving the Asynchronous Event Request command, then a notification is not sent. 

Asynchronous e v e nts may b e r e port e d du e to a s i ng le i nstanc e ( e .g., I nva li d Doorb ell Wr i t e Va l u e ) or a 

p e rs i st e nt cond i t i on ( e .g., T e mp e ratur e Abov e Thr e sho l d). I f th e asynchronous e v e nt i s tr i gg e r e d du e to a 

p e rs i st e nt cond i t i on, th e host shou l d mod i fy th e e v e nt thr e sho l d or mask th e e v e nt b e for e i ssu i ng anoth e r 

Asynchronous Ev e nt R e qu e st command. I f th e host c le ars th e e v e nt w i thout tak i ng th e s e r e comm e nd e d 

act i ons for a p e rs i st e nt cond i t i on, th e n th e p e rs i st e nt cond i t i on may caus e r e p e at e d r e port i ng of asynchronous 

e v e nts. 

Wh e n th e contro lle r n ee ds to r e port an e v e nt and th e r e ar e no outstand i ng Asynchronous Ev e nt R e qu e st 

commands, th e contro lle r qu e u e s th e e v e nt i nt e rna l to th e contro lle r and r e ports i t wh e n an Asynchronous 

Ev e nt R e qu e st command i s r e c ei v e d. 


Modify section 1.5 as shown below: 
1.5 Conventions 


Hardware shall return ‘0’ for all bits and registers that are marked as reserved, and host software shall write 
all reserved bits and registers with the value of ‘O’. 


Inside the register section, the following abbreviations are used: 


RO 
RW 
R/W 
RWC 
RWS 
Impl Spec 

Hwlnit 


Read Only 
Read Write 

Read Write. The value read may not be the last value written. 
Read/Write ‘1’ to clear 
Read/Write ‘1’ to set 

Implementation Specific - the controller has the freedom to choose 
its implementation. 

The default state is dependent on NVM Express controller and 
system configuration. The value is initialized at reset, for example by 
an expansion ROM, or in the case of integrated devices, by a 
platform BIOS. 
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For some register fields, it is implementation specific as to whether the field is RW, RWC, or RO; this is 
typically shown as RW/RO or RWC/RO to indicate that if the functionality is not supported that the field is read 
only. 

When a register bit is referred to in the document, the convention used is “Register Symbol.Field Symbol”. 

For example, the PCI command register parity error response enable bit is referred to by the name 
CMD.PEE. If the register field is an array of bits, the field is referred to as “Register Symbol.Field Symbol 
(array offset)”. 

When a memory field is referred to in the document, the convention used is “Register Name [Offset Symbol]”. 

Som e f iel ds or r e g i st e rs ar e 0's bas e d va l u e s. I n a 0's bas e d va l u e , th e va l u e of Oh corr e sponds to 1; oth e r 

va l u e s s i m il ar l y corr e spond to th e va l u e+ 1. 

A 0-based value is a numbering scheme for which the number Oh actually corresponds to a value of 1 h and 
thus produces the pattern of Oh = 1 h, 1 h = 2h, 2h = 3h, etc. In this numbering scheme, there is not a method 
for specifying the value of Oh. 


When a size is stated in the document as KB, the convention used is 1 KB = 1024 bytes. 

Some parameters are defined as a string of ASCII characters. ASCII data fields shall contain only code 
values 20h through 7Eh. For the string “Copyright”, the character “C” is the first byte, the character “o” is the 
second byte, etc. The string is left justified and shall be padded with spaces (ASCII character 20h) to the right 
if necessary. 


Delete section 1.8 as shown below: 

4-ig- Conv e nt i ons 

A 0 - bas e d va l u e i s a numb e r i ng sch e m e for wh i ch th e numb e r Oh actua ll y corr e sponds to a va l u e of 1h and 

thus produc e s th e patt e rn of Oh = 1 h, 1h = 2h, 2h = 3h, e tc. I n th i s numb e r i ng sch e m e , th e r e i s not a m e thod 

for sp e c i fy i ng th e va l u e of Oh. 

Som e param e t e rs ar e d e f i n e d as a str i ng of ASC II charact e rs. ASC II data f iel ds sha ll conta i n on l y cod e va l u e s 

20h through 7Eh. For th e str i ng “Copyr i ght”, th e charact e r “C” i s th e f i rst byt e , th e charact e r “o” i s th e s e cond 

byt e , e tc. Th e str i ng i s le ft just i f ie d and sha ll b e padd e d w i th spac e s (ASC II charact e r 20h) to th e r i ght i f 

n e c e ssary. 


Modify Section 7.7 from NVM Express ECN 009 as shown below: 

7.7 Asynchronous Event Request Host Software Recommendations (Informative) 

This section describes the recommended host software procedure for Asynchronous Event Requests. 

The host sends n Asynchronous Event Request commands (refer to section 7.6.1, step 11). When an 

Asynchronous Event Request completes (providing Asynchronous Event Type, Event Information, and Log 

Page details): 

1. If the event(s) in the reported Log Page may be disabled with the Asynchronous Event Configuration 
feature (refer to section 5.12.1.11), then hWost software issues a Set Features command for the 
Asynchronous Event Configuration feature disabling the reporting of all events that utilize the Log 
Page reported. Host software should wait for the Set Features command to complete. 

2. Host software issues a Get Log Page command requesting the Log Page reported as part of the 
Asynchronous Event Command completion. Host software should wait for the Get Log Page 
command to complete. 
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3. Host software parses the returned Log Page. If the condition is not persistent, then host software 
should re-enable all asynchronous events that utilize the Log Page. If the condition is persistent, then 
host software should re-enable all asynchronous events that utilize the Log Page except for the 
one(s) reported in the Log Page. The host re-enables events by issuing a Set Features command for 
the Asynchronous Event Configuration feature. 

4. Host software should issue an Asynchronous Event Request command to the controller (restoring to 
n the number of these commands outstanding). 

5. If the reporting of event(s) was disabled, host software should enable reporting of the event(s) using 
Asynchronous Event Configuration feature. If the condition reported may persist was p e rs i st e nt , host 
software should continue to monitor the condition (e.g., ov e r t e mp e ratur e spare below threshold^ via 
Get Log Page, to determine if reporting of the event should be re-enabled. 


Modify section 5.9.2 as shown below: 

A completion queue entry is posted to the Admin Completion Queue if the controller has completed returning 
any attributes associated with the Feature. Depending on the Feature Identifier, Dword 0 of the completion 
queue entry may contain feature information (refer to section 0 5.12.1). 


Modify a portion of Figure 85 as shown below: 




Namespace Multi-path I/O and Namespace Sharing Capabilities (NMIC): 

specifies multi-path I/O and namespace sharing capabilities of the namespace. 

This field 

30 

0 

Bits 7:1 are reserved 


Bit 0: If set to T then the NVM namespace may be accessible by two or more controllers in 
the NVM subsystem (i.e., may be a shared namespace). If cleared to ‘0’ then the NVM 
namespace is a private namespace and may only be accessed by the controller that returned 
this namespace data structure. 


Modify Figure 93 as shown below: 


Figure 2: Power Management - Command Dword 11 


Bit 

Description 

31:05 

Reserved 

04:00 

Power State (PS): This field indicates the new power state into which the controller should 
transition. This power state shall be one supported by the controller as indicated in the Number of 
Power States Supported (NPSS) field in the Indentify Identify Controller data structure. The 
behavior of transitioning to a power state not supported by the controller is undefined. 


Modify section 6.16 as shown below: 

The Write Zeroes command is used to set a range of logical blocks to zero. After successful completion of 
this command, the value returned by subsequent reads of logical blocks in this range shall be zeroes until a 
write occurs to this LBA range. The metadata for this command shall be all zeroes and the protection 
information is updated based on CDW12.PRINFO. 
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Modify Figure 174 as shown below: 


Figure 174: Write Zeroes - Command Dword 12 


Bit 

Description 

31 

Limited Retry (LR): If set to T, the controller should apply limited retry efforts. If cleared to ‘O’, 
the controller should apply all available error recovery means to write the data to the NVM. 

30 

Force Unit Access (FUA): This field indicates that the data shall be written to non-volatile media 
before indicating command completion. There is no implied ordering with other commands. 

29:26 

Protection Information Field (PRINFO): Specifies the protection information action and check 
field, as defined in Figure 127. The Protection Information Check field (PRCHK) shall be 000b. 

25:16 

Reserved 

15:00 

Number of Logical Blocks (NLB): This field indicates the number of logical blocks to be 
written. This is a 0’s based value. 


Modify Figure 30 as shown below: 


Figure 3: Status Code - Generic Command Status Values 


Value 

Description 

OOh 

Successful Completion: The command completed successfully. 

01 h 

Invalid Command Opcode: The associated command opcode field is not valid. 

02h 

Invalid Field in Command: An invalid or unsupported field specified in the command parameters. 


Modify a portion of section 5.12.1.12 as shown below: 

This feature configures the settings for autonomous power state transitions, refer to section 8.4.2. 

The Autonomous Power State Transition uses Command Dword 11 and specifies the typ e and attribute 
information in the data structure indicated in Figure 105. Th e data structur e i s 256 byt e s i n s i z e and sha ll b e 
phys i ca ll y cont i guous. 

If a Get Features command is issued for this Feature, the attributes specified in Figure 105 are returned in 
Dword 0 of the completion queue entry and the Autonomous Power State Transition data structure, whose entry 
structure is defined in Figure 106 is returned in the data buffer for that command. 


Figure 105: Autonomous Power State Transition - Command Dword 11 


Bit 

Description 

31:01 

Reserved 

00 

Autonomous Power State Transition Enable (APSTE): This field specifies whether 
autonomous power state transition is enabled. If this field is set to T, then autonomous power 
state transitions are enabled. If this field is cleared to ‘O’, then autonomous power state transitions 
are disabled. This field is cleared to ‘0’ by default. 


Each entry in the Autonomous Power State Transition data structure is defined in Figure 106. Each entry is 64 
bits in size. There is an entry for each of the allowable 32 power states. For power states that are not supported, 
the unused Autonomous Power State Transition data structure entries shall be cleared to all zeroes. The entries 
begin with power state 0 and then increase sequentially (i.e., power state 0 is described in bytes 7:0, power 
state 1 is described in bytes 15:8, etc). The data structure is 256 bytes in size and shall be physically 
contiguous. 
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Modify a portion of section 8.2 as shown below: 

The second mechanism for transferring the metadata is as a separate cont i guous buffer of data. This 
mechanism is illustrated in Error! Reference source not found.. In this case, the metadata is pointed to with 
the Metadata Pointer (or M e tadata SGL S e gm e nt Po i nt e r i f SGLs ar e us e d) , while the logical block data is 
pointed to by the Data Pointer PRP1 and PRP2 po i nt e rs (or SGL Entry 1 i f SGLs ar e us e d) . When a command 
uses PRPs for the metadata in the command, Tthe metadata is required to be physically contiguous i n th i s cas e 
s i nc e th e r e i s on l y on e M e tadata Po i nt e r . When a command uses SGLs for the metadata in the command, the 
metadata is not required to be physically contiguous. 


Modify a portion of section 4.5 as shown below: 

Metadata may be supported for a namespace as either part of the logical block (creating an extended logical 
block which is a larger logical block that is exposed to the application) or it may be transferred as a separate 
cont i guous buffer of data. The metadata shall not be split between the logical block and a separate metadata 
buffer. For writes, the metadata shall be written atomically with its associated logical block. Refer to section 

Error! Reference source not found.. 

In the case where the namespace is formatted to transfer the metadata as a separate cont i guous buffer of data, 
then the Metadata Region is used. In this case, the location of the Metadata Region is indicated by the Metadata 
Pointer within the command. The Metadata (SGL S e gm e nt) Pointer within the command shall be Dword 
aligned. 


Modify a portion of Figure 68 as shown below: 


Figure 4: Get Features - Command Dword 10 


Bit Description _ 

31:11 Reserved _ 

Select (SEL): This field specifies which value of the attributes to return in the provided data: 


10:08 


Select 

Description 

000b 

Current 

001b 

Default 

010b 

Saved 

011b 

Supported capabilities 

100b - 111b 

Reserved 


Refer to section Error! R e f e r e nc e sourc e not found. 5.9.1 for details on the value returned in 
each case. 


The controller indicates in bit 4 of the Optional NVM Command Support field of the Identify 
Controller ©data structure in Figure 83 whether this field is supported. 

If a Get Features command is received with the Select field set to 010b (i.e., saved) and the 
controller does not support the Feature Identifier being saved or does not currently have any saved 
values, then the controller shall treat the Select field as though it was set to 001 b (i.e., default.) 
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Modify a portion of Figure 89 as shown below: 


Figure 5: Set Features - Command Dword 10 


Bit 

Description 

31 

Save (SV): This field specifies that the controller shall save the attribute so that the attribute 
persists tiro through all power states and resets. 

The controller indicates in bit 4 of the Optional NVM Command Support field of the Identify 
Controller ©data structure in Figure 83 whether this field is supported. 

If the Feature Identifer specified in the Set Features command is not saveable by the controller 
and the controller recieves a Set Features command with the Save bit set to one, then the 
command shall be aborted with a status of Feature Identifier Not Saveable. 


Modify a portion of Figure 90 as shown below: 

This column is only valid if bit 4 in the Optional NVM Command Support field of the Identify Controller ©data structure 
Figure 83 is cleared to ‘O’. 
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Modify a portion of Figure 91 as shown below: 


This column is only valid if bit 4 in the Optional NVM Command Support field of the Identify Controller ©data structure in 
Figure 83 is cleared to ‘O’. 


Modify a portion of Figure 83 as shown below: 


Figure 83: Identify - Identify Controller Data Structure 


Bytes 

O/M 

Description 

259 

M 

Asynchronous Event Request Limit (AERL): This field is used to convey the 
maximum number of concurrently outstanding Asynchronous Event Request 
commands supported by the controller (see section Error! Reference source not 
found.). This is a 0’s based value. It is recommended that implementations support 
a minimum of four Asynchronous Event Request Limit commands outstanding 
simultaneously. 


Modify a portion of Figure 109 as shown below: 


Figure 109: Reservation Notification Configuration - Command Dword 11 


Bit 

Description 

31:04 

Reserved 

03 

Mask Reservation Preempted Notification (RESPRE): If set to T, then mask the reporting of 
reservation preempted notification by the controller. If cleared to ‘O’, then the notification is not 
masked and a Reservation Notification log page is created whenever notification occurs. 

02 

Mask Reservation Released Notification (RESREL): If set to T, then mask the reporting of 
reservation released notification by the controller. If cleared to ‘O’, then the notification is not 
masked and a Reservation Notification log page is created whenever the notification occurs. 

01 

Mask Registration Preempted Notification (REGPRE): If set to T, then mask the reporting of 
registration preempted notification by the controller. If cleared to ‘O’, then the notification is not 
masked and a Reservation Notification log page is created whenever the notificaiton notification 
occurs. 

00 

Reserved 


Modify a portion of section 3.1.8 as shown below: 
3.1.8 Offset 24h: AQA - Admin Queue Attributes 


Bit 

Type 

Reset 

Description 

31:28 

RO 

Oh 

Reserved 

27:16 

RW 

Oh 

Admin Completion Queue Size (ACQS): Defines the size of the Admin Completion 
Queue in entries. Refer to section 4.1.3. Enabling a controller while this field is cleared 
to OOh produces undefined results. The minimum size of the Admin Completion Queue 
is two entries. The maximum size of the Admin Completion Queue is 4096 entries. This 
is a 0’s based value. 

15:12 

RO 

Oh 

Reserved 

11:00 

RW 

Oh 

Admin Submission Queue Size (ASQS): Defines the size of the Admin Submission 
Queue in entries. Refer to section 4.1.3. Enabling a controller while this field is cleared 
to OOh produces undefined results. The minimum size of the Admin Submission Queue 
is two entries. The maximum size of the Admin Submission Queue is 4096 entries. This 
is a 0’s based value. 
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Modify a portion of Figure 32 as shown below: 


Figure 32: Status Code - Command Specific Status Values 


Value 

Description 

Commands Affected 

OOh 

Completion Queue Invalid 

Create I/O Submission Queue 

01 h 

Invalid Queue Identifier 

Create I/O Submission Queue, Create I/O 
Completion Queue, Delete I/O Completion 
Queue, Delete I/O Submission Queue 

02h 

Maximum Invalid Queue Size Exceeded 

Create I/O Submission Queue, Create I/O 
Completion Queue 


Modify a portion of Figure 51 as shown below: 


Figure 51: Create I/O Completion Queue - Command Specific Status Values 


Value 

Description 

1 h 

Invalid Queue Identifier: The creation of the I/O Completion Queue failed due to an invalid queue 
identifier specified as part of the command. An invalid queue identifier is one that is currently in use 
or one that is outside the range supported by the controller. 

2h 

Maximum Invalid Queue Size Exceeded: The host attempted to create an I/O Completion Queue 
with an invalid number of entries (e.g., that a value of zero or a value which exceeds the maximum 
supported by the controller, specified in CAP.MQES). 


Modify a portion of Figure 55 as shown below: 


Figure 55: Create I/O Submission Queue - Command Specific Status Values 


Value 

Description 

Oh 

Completion Queue Invalid: The Completion Queue identifier specified in the command does not 
exist. 

1 h 

Invalid Queue Identifier: The creation of the I/O Submission Queue failed due an invalid queue 
identifier specified as part of the command. An invalid queue identifier is one that is currently in use 
or one that is outside the range supported by the controller. 

2h 

Maximum Invalid Queue Size Exceeded: Host software attempted to create an I/O Submission 
Queue with an invalid number of entries (e.g., that a value of zero or a value which exceeds the 
maximum supported by the controller, specified in CAP.MQES) 


Modify the paragraph following Figure 180 as shown below: 

The attributes of the Write command are: 

• CMD1 .CDWO.OPC is set to 01 h for Write. 

• CMD1 .CDWO.FUSE is set to 10b indicating that this is the second command of a fused operation. 

• CMD1 .CDWO.CID is set to a free command identifier. 

• CMD1 .CDW1 .NSID is set to the appropriate namespace. This value shall be the same as 
CMD0.CDW1 .NSID. 

• If metadata is being used in a separate buffer, then the location of that buffer is specified. 

o If a command uses PRPs then CMD1 .MPTFt is set to the address of the metadata buffer, 
o If a command uses SGLs then CMD1.MSGLP is set to an SGL segment that describes the 
metadata buffer. 

• The physical address of the first page of data to write is identified. 

o If the command uses PRPs, then CMD1 .PRP1 is set to the physical address of the first page 
of the data to writer and CMD1 .PRP2 is set to the physical address of the PRP List. The 
PRP List includes three entries. 
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o If the command uses SGLs, CMDO.SGL1 CMD1 .SGL1 is set to an appropriate SGL segment 
descriptor depending on whether more than one descriptor is needed. 

• CMD1 .CDW10.SLBA is set to the first LBA to compare against. Note that this field also spans 
Command Dword 11. This value shall be the same as CMD0.CDW10.SLBA. 

• CMD1 .CDW12.LR is set to ‘0’ to indicate that the controller should apply all available error recovery 
means to write the data to the NVM. 

• CMD1 .CDW12.FUA is cleared to ‘O’, indicating that the data may be written to any location, including 
a DRAM cache, in the NVM subsystem. 

• CMD1 .CDW12.PRINFO is cleared to Oh since end-to-end protection is not enabled. 

• CMD1 .CDW12.NLB is set to 3h, indicating that four logical blocks of a size of 4KB each are to be 

compared against. This value shall be the same as CMD0.CDW12.NLB. 

• CMD1 .CDW14 is cleared to Oh since end-to-end protection is not enabled. 

• CMD1 .CDW15 is cleared to Oh since end-to-end protection is not enabled. 


Modify the sixth paragraph of section 7.8 as shown below: 

If the controller supports the Save field in the Set Features command and the Select field in the Get Features 
command, then any Feature Identifier may be namespace specific as a value may be saved per namespace. 
I f b i t A i s s e t to '1 ’ i n th e Opt i ona l NVM Command Support f iel d of th e I d e nt i fy Contro lle r Data structur e i n 

F i gur e 83, th e n any F e atur e I d e nt i f ie r may b e nam e spac e sp e c i f i c d e p e nd i ng on th e i mp le m e ntat i on. Host 

softwar e may d i scov e r i f a F e atur e I d e nt i f ie r i s nam e spac e sp e c i f i c by us i ng th e ‘support e d capab ili t ie s’ va l u e 

i n th e S ele ct f iel d i n G e t F e atur e s. I f b i t A i s c le ar e d to '0' i n th e Opt i ona l NVM Command Support f iel d of th e 

I d e nt i fy Contro lle r Data structur e i n F i gur e 83, th e n LBA Rang e Typ e i s th e on l y F e atur e I d e nt i f ie r that i s 

nam e spac e sp e c i f i c. 


Modify the second paragraph of section 8.3 as shown below (adding a parenthesis after “Figure 181”): 

The most commonly used data protection mechanisms in Enterprise implementations are Data Integrity Field 
(DIF), defined in the SCSI Block Commands - 3 reference (SBC-3), and the Data Integrity Extension (DIX). 
The primary difference between these two mechanisms is the location of the protection information. In DIF the 
protection information is contiguous with the logical block data and creates an extended logical block, while in 
DIX the protection information is stored in a separate buffer. The end-to-end data protection mechanism 
defined by this specification is functionally compatible with both DIF and DIX. DIF functionality is achieved by 
configuring the metadata to be contiguous with logical block data (as shown in Figure 181), while DIX 
functionality is achieved by configuring the metadata and data to be in separate buffers (as shown in Figure 
182). 


Modify section 7.3.3 as shown below: 

7.3.3 Queue Level 

The host may reset and/or reconfigure the I/O Submission and I/O Completion Queues by resetting them. A 
queue level reset is performed by deleting and then recreating the queue. In this process, the host should wait 
for all pending commands to the appropriate I/O Submission Queue(s) to complete. To perform the reset, the 
host submits the Delete I/O Submission Queue or Delete I/O Completion Queue command to the Admin Queue 
specifying the identifier of the queue to be deleted. After successful command completion of the queue delete 
operation, the host then recreates the queue by submitting the Create I/O Submission Queue or Create I/O 
Completion Queue command. As part of the creation operation, the host may modify the attributes of the queue 
if desired. 
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The host should ensure that the appropriate I/O Submission Queue or I/O Completion Queue is idle before 
deleting it. Submitting a queue deletion command causes any pending commands to be aborted by the 
controller; this may or may not result in a completion queue entry being posted for the aborted command(s). 
Note that if a queue level reset is performed on an I/O Completion Queue, the I/O Submission Queues that are 
utilizing the I/O Completion Queue should be reset as part of the same operation. The behavior of an I/O 
Submission Queue without a corresponding I/O Completion Queue is undefined. 


Modify section 7.4.3 as shown below: 

7.4.3 Queue Abort 

To abort a large number of commands, the recommended procedure is to delete and recreate the I/O 
Submission Queue. Specifically, to abort all commands that are submitted to the I/O Submission Queue host 
software should issue a Delete I/O Submission Queue command for that queue. After the queue has been 
successfully deleted, indicating that all commands have been completed or aborted, then host software 
should recreate the queue by submitting a Create I/O Submission Queue command. Host software may then 
re-submit any commands desired to the associated I/O Submission Queue. 


Modify the first paragraph of section 1.4 as shown below: 

NVM Express is a scalable host controller interface designed to address the needs of Enterprise and Client 
systems that utilize PCI Express based solid state drives. The interface provides optimized command 
submission and completion paths. It includes support for parallel operation by supporting up to 65,535 I/O 
Queues with up to 64K outstanding commands per I/O Queue. Additionally, support has been added for 
many Enterprise capabilities like end-to-end data protection (compatible with SCSI Protection Information, 
commonly known as T10 DIF, and SNIA DIX standards), enhanced error reporting, and virtualization. 


Modify paragraphs two and three of section 8.3 as shown below: 

The most commonly used data protection mechanisms in Enterprise implementations are SCSI Protection 
Information, commonly known as Data Integrity Field (DIF), d e f i n e d i n th e SCS I B l ock Commands —3 
r e f e r e nc e (SBC - 3), and the Data Integrity Extension (DIX). The primary difference between these two 
mechanisms is the location of the protection information. In SCSI Protection Information OP the protection 
information is contiguous with the logical block data and creates an extended logical block, while in DIX the 
protection information is stored in a separate buffer. The end-to-end data protection mechanism defined by 
this specification is functionally compatible with both SCSI Protection Information OP and DIX. SCSI 
Protection Information OP functionality is achieved by configuring the metadata to be contiguous with logical 
block data (as shown in Figure 181, while DIX functionality is achieved by configuring the metadata and data 
to be in separate buffers (as shown in Figure 182). 

NVM Express supports the same end-to-end protection types as SCSI Protection Information OP. The type 
of end-to-end data protection (Type 1, Type 2, or Type 3) is selected when a namespace is formatted and is 
reported in the Identify Namespace data structure. 


Modify the second paragraph following Figure 185 as shown below: 

Checking of protection information consists of the following operations performed by the controller. If bit 2 of 
the Protection Information Check (PRCHK) field of the command is set to ‘T, then the controller compares the 
protection information Guard field to the CRC-16 computed over the logical block data. If bit 1 of the PRCHK 
field is set to T, then the controller compares unmasked bits in the protection information Application Tag 
field to the Logical Block Application Tag (LBAT) field in the command. A bit in the protection information 
Application Tag field is masked if the corresponding bit is cleared to ‘0’ in the Logical Block Application Tag 
Mask (LBATM) field of the command. If bit 0 of the PRCHK field is set to T, then the controller compares the 
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protection information Reference Tag field to the computed reference tag. The value of the computed 
reference tag for the first LBA of the command is the value contained in the Initial Logical Block Reference 
Tag (ILBRT) or Expected Initial Logical Block Reference Tag (EILBRT) field in the command, for writes and 
reads respectively. The computed reference tag is incremented for each subsequent logical block. Unlike 
SCSI Protection Information QtR Type 1 protection which implicitly uses the least significant four bytes of the 
LBA, The controller always uses the ILBRT or EILBRT field and requires host software to initialize the ILBRT 
or EILBRT field to the least significant four bytes of the LBA when Type 1 protection is used. 


Modify the third step in section 7.2.1 as shown below: 

3. The controller fetches the command(s) in the Submission Queue from host memory for future 
execution. Arbitration is the method used to determine the Submission Queue from which the controller 
starts processing the next candidate command, refer to section 4.9. 

Modify the first paragraph of section 7.2.5.2 as shown below: 

This example describes how host software creates and executes a fused command, specifically Compare and 
Write for a total of 16KB of data. In this case, there are two commands that are created. The first command 
is the Compare, referred to as CMDO. The second command is the Write, referred to as CMD1. In this case, 
end-to-end data protection is not enabled and the size of each LBA logical block is 4KB. 


Modify the Shutdown Status field in section 3.1.6 as shown below: 


Shutdown Status (SHST): This field indicates the status of shutdown processing that 
is initiated by the host setting the CC.SHN field. 

The shutdown status values are defined as: 


Value 

Definition 

00b 

Normal operation (no shutdown has been requested) 

01b 

Shutdown processing occurring 

10b 

Shutdown processing complete 

11b 

Reserved 


To start executing commands on the controller after a shutdown operation (CSTS.SHST 
set to 10b), a Controller Reset reset (CC.EN cleared to ‘0’) is required. If host software 
submits commands to the controller without issuing a reset, the behavior is undefined. 


Modify the first paragraph of section 5.7 as shown below: 

The Firmware Activate command is used to verify that a valid firmware image has been downloaded and to 
commit that revision to a specific firmware slot. The host may select the firmware image to activate on the 
next Controller Level Reset contro lle r r e s e t (CC.EN trans i t i ons from '1' to ‘O', a PC I funct i on le v el r e s e t, and/or 
oth e r Contro lle r or NVM Subsyst e m R e s e t) as part of this command. The currently executing firmware 
revision may be determined from the Firmware Revision field of the Identify Controller data structure in Figure 
83 or as indicated in the Firmware Slot Information log page. 


Modify the first paragraph of section 5.7.1 as shown below: 

A completion queue entry is posted to the Admin Completion Queue if the controller has completed the 
requested action (specified in the Activate Action field). For requests that specify activation of a new firmware 
image and return with status code value of OOh, any contro lle r le v el r e s e t Controller Level Reset defined in 
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section 7.3.1 7.3.2 activates the specified firmware. Firmware Activate command specific status values are 
defined in Figure 61. 


Modify the title and first paragraph of section 7.3.2 as shown below: 

7.3.2 Controller Level Reset 

There are five primary contro lle r le v el r e s e t Controller Level Reset mechanisms: 


Modify the fifth and sixth paragraphs of section 7.6.2 as shown below: 

It is recommended that the host wait a minimum of one second for the shutdown operations to complete. It 
not recommended to disable the controller via the CC.EN field. This causes a Controller Reset contro lle r 
r e s e t cond i t i on which may impact the time required to complete shutdown processing. 

To start executing commands on the controller after a shutdown operation, a Controller Reset reset (CC.EN 
cleared from T to ‘0’) is required. The initialization sequence should then be executed. 


Modify the second paragraph of section 9.1 as shown below: 

In the case of serious error conditions for Admin commands, the entire controller should be reset using a 
Contro lle r R e s e t Controller Level Reset. The entire controller should also be reset if a completion is not 
received for the deletion of a Submission Queue or Completion Queue. 
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